dstw[.]cc
dstw.cc için kimlik avı ve güvenlik kontrolü
“dstw.cc”
dstw.cc — İçerik kullanılamıyor (HTTP 502). Kanıt özeti: VT 7/93 (alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Lionic); URLQuery 9 alerts; URLScan no malicious verdict; GSB no flag; BL 1 (ScamSniffer); PD 92/100. Kayıt kuruluşu: Sharkweek Domains.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
dstw.cc entered the PhishDestroy evidence set on Jan 28, 2026. The assembled evidence scores 92/100 (critical).
Three independent sources are positive: VirusTotal, ScamSniffer, and URLQuery. VirusTotal recorded 7 detections among 93 engines: alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Lionic, Seclookup, SOCRadar on Feb 25, 2026 at 00:58 UTC. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. URLQuery recorded 9 threat-system alerts on Jan 28, 2026 at 05:40 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 10:52 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:27 UTC. URLScan completed without a malicious verdict.
HTTP 502 was recorded on Aug 7, 2026 at 01:32 UTC; content was unavailable. Registration records for the domain list Sharkweek Domains LLC as the registrar. At collection time, the hostname resolved to 103.224.182.217 on AS133618 (Trellian Pty. Limited). The associated network metadata labels the endpoint as AS133618 Trellian Pty. Limited in San Diego, US. The stored server header is nginx. Captured page title: “dstw.cc”. DOM analysis completed on Jul 9, 2026 at 06:20 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 2, 2026 at 04:15 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists R12 as the certificate issuer with validity through Jun 7, 2026; checked Mar 15, 2026 at 05:57 UTC.
No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as phishing. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| DNS4EU | ww38.dstw.cc |
malicious | Sinkholed |
| DNS4EU | realtimesearchresults.com |
malicious | Sinkholed |
| Cloudflare DNS | realtimesearchresults.com |
malicious | Sinkholed |
| DNS4EU | dstw.cc |
malicious | Sinkholed |
| DNS4EU | euob.youstarsbuilding.com |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 1 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
VirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of dstw.cc · checked Mar 2, 2026
Kanıtlar ve Dış Raporlar
“The PhishDestroy system has identified this domain as a phishing threat, flagged both by our internal parser and reported by users. We also cross-reference with public databases and other antivirus systems.”
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin